Behavioral task
behavioral1
Sample
3b6765e043527db080fd2b496b758150_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
3b6765e043527db080fd2b496b758150_JaffaCakes118
-
Size
53KB
-
MD5
3b6765e043527db080fd2b496b758150
-
SHA1
fefe9702a6dc823e22376d5d1f03458edfaf9eb0
-
SHA256
aa9ddc20a93a9c3657b2531e4465bc033ab64d044282306682580607f334c5a5
-
SHA512
cf5734a25321857a3ecdf938cfd569cccba670422e9f4df62cd93f101b9b89e22ff8f4f64dbe2ff792c989f56abe86166df2479644d3802352543f990007ed67
-
SSDEEP
384:WvP/XabUx7arFMdIlANQSy2qBBk3tqOAYSktyECHzU9kDUBJxJQFd/DzrLPp/8d+:V4JaV52rSTFsAzrbNGNWRmfuA
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b6765e043527db080fd2b496b758150_JaffaCakes118
Files
-
3b6765e043527db080fd2b496b758150_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE